More on preventing device installs

by Mitch Tulloch [Published on 15 Aug. 2006 / Last Updated on 15 Aug. 2006]

Another way you can configure Vista to prevent certain kinds of devices from being installed.

Another way Vista lets you prevent new devices from being installed is by specifying the PnP hardware ID of the device type you want to prohibit. To do this, edit local Group Policy as follows:

1. Type gpedit.msc in the Start Search box and hit Enter.

2. Click Continue when the UAC prompt appears.

3. Navigate to the following policy location:

Computer Configuration\Administrative Templates\System\Device Installation Restrictions

4. Enable the following policy setting:

Prevent installation of devices that match these device IDs

5. Click Show

6. Click Add

7. Specify the device ID of the type of device you want to prevent from being installed. For example, to prevent USB combined devices like a keyboard with integrated pointing device from being installed, specify the following device ID:


Mitch Tulloch, MVP

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see .

Latest Contributions

Featured Links